Static task
static1
Behavioral task
behavioral1
Sample
dde2a986d062a0564e4dc79f5857c069_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dde2a986d062a0564e4dc79f5857c069_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dde2a986d062a0564e4dc79f5857c069_JaffaCakes118
-
Size
1.1MB
-
MD5
dde2a986d062a0564e4dc79f5857c069
-
SHA1
fec8a8f6280e82065178fe315c96c114fb77c08c
-
SHA256
50dd202c8d4d81e03189f45d755c7a89a485ccfe4b919a8e2f05fa8b7edf569f
-
SHA512
5d67aadb9dc59d7b80719f328a8039d8bf45f9858fee642013e34cfee413f15cf72ee644f00f0df1a8873f3435a4019b4fc243a1d47c491d69e55fad9afbc25f
-
SSDEEP
12288:Ws+AMoSI/vj/d+7MY6oIB20hoEsA1sxpVqROc4TqMmqqyClksXmQVRNMe4af5a23:W6+I/vzM6Jp+VrqROk3qOlnMif5aSMF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde2a986d062a0564e4dc79f5857c069_JaffaCakes118
Files
-
dde2a986d062a0564e4dc79f5857c069_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ